How many CVEs does vcita have?

vcita has 35 published CVE records since 2023, including 13 in the last two years.

How many vcita CVEs are in CISA KEV?

None of vcita's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which vcita products have the most CVEs?

The vcita products with the most published CVEs are online booking & scheduling calendar, Online Booking & Scheduling Calendar for WordPress by vcita, CRM and Lead Management by vcita, Online Payments – Get Paid with PayPal, Square & Stripe, Contact Form and Calls To Action by vcita.

What are the most common weakness types in vcita CVEs?

vcita's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-352 (Cross-Site Request Forgery (CSRF)), CWE-862 (Missing Authorization), CWE-209 (Generation of Error Message Containing Sensitive Information).

Are there public exploits for vcita vulnerabilities?

No vcita CVEs currently have a tracked public exploit in this dataset.

How many critical vcita vulnerabilities are there?

vcita has 1 critical and 6 high-severity CVEs.

What is the average severity of vcita CVEs?

The average CVSS base score across vcita's scored CVEs is 6.3.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

35 CVEs

vcita Vulnerabilities

Name: vcita vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for vcita.

35

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

6.3

Avg CVSS

2023–2025

Overview

vcita has 35 published CVE records since 2023, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 6.3.

This page aggregates every publicly disclosed vulnerability (CVE) affecting vcita products, with severity breakdowns, the most-affected products, the most common weakness types, and the latest disclosures.

Security scorecard

A quick read on vcita's vulnerability posture, as a share of its 35 published CVEs.

Average CVSS: 6.3
Critical / high: 20%
Actively exploited (KEV): 0%
Public exploit available: 0%
Patch available: 100%

Severity and exploitation

How the CVSS severity of vcita's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High6

Medium28

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of vcita's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No vcita CVEs currently have a tracked public exploit.

Most affected products

The vcita products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.

Common weakness types

The CWE weakness categories most often found in vcita CVEs. Follow any weakness for its full explanation.

CNAs that assign these CVEs

The CVE Numbering Authorities that publish vcita CVE records.

Disclosure activity by year

How many vcita CVEs were published each year.

2023

14

2024

8

2025

13

Latest vcita CVEs

The most recently disclosed vulnerabilities affecting vcita.

WordPress Online Booking & Scheduling Calendar for WordPress by vcita plugin <= 4.5.5 - Broken Access Control vulnerability
CWE-862
Medium · CVSS 5.4
EPSS 0.2%2025-12-09
WordPress Online Booking & Scheduling Calendar for WordPress by vcita plugin <= 4.5.5 - Cross Site Request Forgery (CSRF) vulnerability
CWE-352
High · CVSS 8.8
EPSS 0.1%2025-12-09
WordPress Online Booking & Scheduling Calendar for WordPress by vcita Plugin <= 4.5.3 - Arbitrary File Upload Vulnerability
CWE-434
Critical · CVSS 9.1
EPSS 0.4%2025-08-20
WordPress Online Booking & Scheduling Calendar for by vcita Plugin plugin <= 4.5.3 - Cross Site Scripting (XSS) Vulnerability
CWE-79
Medium · CVSS 6.5
EPSS 0.2%2025-08-14
CRM and Lead Management by vcita <= 2.7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via type Parameter
CWE-79
Medium · CVSS 6.4
EPSS 0.3%2025-07-22
WordPress Online Booking & Scheduling Calendar for WordPress by vcita plugin <= 4.5.5 - Sensitive Data Exposure vulnerability
CWE-209
Medium · CVSS 4.3
EPSS 0.5%2025-04-04
CRM and Lead Management by vcita <= 2.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
CWE-79
Medium · CVSS 6.4
EPSS 0.2%2025-03-26
CRM and Lead Management by vcita <= 2.7.5 - Missing Authorization to Authenticated (Susbcriber+) Widget Toggle
CWE-862
Medium · CVSS 4.3
EPSS 0.3%2025-03-13
Online Payments – Get Paid with PayPal, Square & Stripe <= 3.20.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
CWE-79
Medium · CVSS 6.4
EPSS 0.4%2025-02-18
Contact Form and Calls To Action by vcita <= 2.7.1 - Missing Authorization to Authenticated (Subscriber+) Contact/Widget Toggle
CWE-862
Medium · CVSS 4.3
EPSS 0.3%2025-01-31
Contact Form and Calls To Action by vcita <= 2.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
CWE-79
Medium · CVSS 6.4
EPSS 0.3%2025-01-31
WordPress Online Payments plugin <= 3.20.0 - Cross Site Scripting (XSS) vulnerability
CWE-79
Medium · CVSS 6.5
EPSS 0.2%2025-01-21

Track new vcita CVEs as they are disclosed and get AI-written analysis and remediation guidance.

Monitor vcita CVEs

Other vendors

Browse vulnerabilities for other tracked vendors.

microsoft25,696 CVEs linux21,056 CVEs Google15,680 CVEs Apple14,957 CVEs Oracle11,815 CVEs Debian10,221 CVEs IBM8,381 CVEs Red Hat7,837 CVEs

Browse all vendors

Frequently asked questions

Common questions about vcita vulnerabilities.

How many CVEs does vcita have?: vcita has 35 published CVE records since 2023, including 13 in the last two years.
How many vcita CVEs are in CISA KEV?: None of vcita's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Which vcita products have the most CVEs?: The vcita products with the most published CVEs are online booking & scheduling calendar, Online Booking & Scheduling Calendar for WordPress by vcita, CRM and Lead Management by vcita, Online Payments – Get Paid with PayPal, Square & Stripe, Contact Form and Calls To Action by vcita.
What are the most common weakness types in vcita CVEs?: vcita's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-352 (Cross-Site Request Forgery (CSRF)), CWE-862 (Missing Authorization), CWE-209 (Generation of Error Message Containing Sensitive Information).
Are there public exploits for vcita vulnerabilities?: No vcita CVEs currently have a tracked public exploit in this dataset.
How many critical vcita vulnerabilities are there?: vcita has 1 critical and 6 high-severity CVEs.
What is the average severity of vcita CVEs?: The average CVSS base score across vcita's scored CVEs is 6.3.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track vcita vulnerabilities

Monitor new vcita vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing